Privacy Policy and KVKK Disclosure
Last updated: March 2025
1. Data Controller
Data controller within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”):
Sahinoglu Turizm Tas. Deri Gida Teks. Ins. San. ve Tic. Ltd. Sti.
Sümer, Zübeyde Hanım Cd. 9.Sokak No:1/A, 34020 Zeytinburnu/Istanbul
info@sahinogluturizm.com.tr | senol@sahinogluturizm.com.tr
0212 679 20 20 | +90 532 583 22 57
2. Personal Data Collected
The following personal data is collected to provide our services:
Identity and Contact Information
Full name, email address, phone number, Turkish ID number (for Turkish citizens), passport number (for foreign passengers) and gender information.
Financial Information
Invoice details (name or company name, tax number, address) and payment history. Your credit card information is never stored by us; payment transactions are processed through YKB PosNet 3D Secure protocol via the banking infrastructure.
Transaction Information
Booking details, transfer route information (pickup-dropoff addresses, coordinates), flight/train number and service history.
Technical Information
IP address, browser information, device information and cookie data.
3. Purposes and Legal Basis for Processing
Your personal data is processed for the following purposes and legal grounds:
Performance of Contract (KVKK Art. 5/2-c)
Creating bookings, providing transfer services, customer communication and invoicing.
Legal Obligation (KVKK Art. 5/2-d)
Turkish ID numbers and passenger information are legally required to be collected for UETDS (Transport Electronic Tracking and Inspection System) reporting to the Ministry of Transport and Infrastructure. Your explicit consent is not required for this data processing activity. Additionally, your invoice information is processed in accordance with tax legislation.
Legitimate Interest (KVKK Art. 5/2-f)
Improving service quality, security and fraud prevention.
Explicit Consent (KVKK Art. 5/1)
Marketing communications including campaigns, promotions and announcements are only sent with your explicit consent.
4. Data Sharing
Your personal data is shared only with the following parties and for the stated purposes:
T.R. Ministry of Transport and Infrastructure: UETDS reporting (legal obligation).
Payment service provider: Yapi Kredi Bank PosNet infrastructure (3D Secure payment transactions).
Infrastructure services: Server and database services are hosted on Google Cloud Platform (EU region).
Authorized authorities: In case of court order or official request.
Your data is not shared with third parties other than those listed above and is not transferred abroad.
5. Data Security
SSL/TLS encryption, YKB PosNet 3D Secure payment protocol, encrypted database connections, access control mechanisms, rate limiting, CSRF protection and regular security updates are implemented to protect your data. Your credit card information is never stored in our systems in any form.
6. Retention Period
Your personal data is retained for the duration required by the service and legal retention obligations. Booking and invoice records are retained for 10 years under tax legislation, UETDS records for 5 years. Your account information is kept until the account is deleted. Data whose retention period has expired is deleted or anonymized in accordance with KVKK.
7. Cookie Policy
The following cookies are used on our site:
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | User login and session management | Session duration |
| Language preference | Storing selected language setting | 1 year |
| Booking data | Temporary storage of form information | Session duration |
| Yandex Metrica | Site performance and visitor analytics | 1 year |
You can manage cookies through your browser settings. Disabling essential cookies may affect site functionality.
8. Your Rights Under KVKK
Under Article 11 of KVKK, you have the following rights:
To learn whether your personal data is being processed
To request information about processing if it has been processed
To learn the purpose of processing and whether data is used in accordance with its purpose
To know the third parties to whom data is transferred
To request correction if data is incomplete or incorrect
To request deletion or destruction under Article 7 of KVKK
To request notification of corrections or deletions to third parties
To object to a result against you arising from the analysis of processed data
To claim compensation for damages caused by unlawful processing
9. How to Apply
To exercise your rights under KVKK, you can send an application from your registered email address to info@sahinogluturizm.com.tr or send a notarized/registered letter to our company address.
Applications are resolved free of charge within 30 days at the latest. If the process requires an additional cost, the tariff determined by the KVKK Board applies.
10. Marketing Communications
In accordance with Law No. 6563 on the Regulation of Electronic Commerce, campaign, promotion and announcement emails or SMS may be sent with your explicit consent. You can withdraw this consent at any time from your profile settings or by using the unsubscribe link in messages.
11. Policy Updates
This document may be updated in line with legal regulations and service changes. The current version is always published on our website. You will be notified via your registered email address for significant changes.
By using our site and creating an account, you agree to the processing of your personal data within the scope of this document. We also recommend reviewing our Terms of Service.